looks like NIST only approved GCM mode for authenticated encryption and other modes don't have any approval or a good implementation available. Is that possible a weakness in $GHASH$ compromise ...
My question rather splits into two sections: Is AES correctly and security implemented in the .net Framework? Are there any reviews of implementation mistakes that would weaken the security of AES ...
I stumbled across a question while studying about MAC, I was thinking if the attacker knows the key and the MAC and he wants to change the message to send to the victim, then how many blocks can he ...